aws-cdk-lib 2.127.0__py3-none-any.whl → 2.129.0__py3-none-any.whl

aws_cdk/aws_ses/__init__.py

@@ -210,6 +210,23 @@ for record in identity.dkim_records:
     pass
 ```
 
+#### Grants
+
+To grant a specific action to a principal use the `grant` method.
+For sending emails, `grantSendEmail` can be used instead:
+
+```python
+import aws_cdk.aws_iam as iam
+# user: iam.User
+
+
+identity = ses.EmailIdentity(self, "Identity",
+    identity=ses.Identity.domain("cdk.dev")
+)
+
+identity.grant_send_email(user)
+```
+
 ### Virtual Deliverability Manager (VDM)
 
 Virtual Deliverability Manager is an Amazon SES feature that helps you enhance email deliverability,
@@ -251,6 +268,7 @@ from .. import (
     TagManager as _TagManager_0a598cb3,
     TreeInspector as _TreeInspector_488e0dd5,
 )
+from ..aws_iam import Grant as _Grant_a7ae64f8, IGrantable as _IGrantable_71c4f5de
 from ..aws_route53 import IPublicHostedZone as _IPublicHostedZone_9b6e7da4
 from ..aws_sns import ITopic as _ITopic_9eca4852
 
@@ -7234,13 +7252,15 @@ class EmailIdentityProps:
 
         Example::
 
-            # my_hosted_zone: route53.IPublicHostedZone
+            import aws_cdk.aws_iam as iam
+            # user: iam.User
             
             
             identity = ses.EmailIdentity(self, "Identity",
-                identity=ses.Identity.public_hosted_zone(my_hosted_zone),
-                mail_from_domain="mail.cdk.dev"
+                identity=ses.Identity.domain("cdk.dev")
             )
+            
+            identity.grant_send_email(user)
         '''
         if __debug__:
             type_hints = typing.get_type_hints(_typecheckingstub__53e1ee2f3b565a95ed952bf4ad2ae80cb7388ac4bd51d6eab5219f8a733ca030)
@@ -7604,6 +7624,15 @@ typing.cast(typing.Any, IDedicatedIpPool).__jsii_proxy_class__ = lambda : _IDedi
 class IEmailIdentity(_IResource_c80c4260, typing_extensions.Protocol):
     '''An email identity.'''
 
+    @builtins.property
+    @jsii.member(jsii_name="emailIdentityArn")
+    def email_identity_arn(self) -> builtins.str:
+        '''The ARN of the email identity.
+
+        :attribute: true
+        '''
+        ...
+
     @builtins.property
     @jsii.member(jsii_name="emailIdentityName")
     def email_identity_name(self) -> builtins.str:
@@ -7613,6 +7642,29 @@ class IEmailIdentity(_IResource_c80c4260, typing_extensions.Protocol):
         '''
         ...
 
+    @jsii.member(jsii_name="grant")
+    def grant(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        *actions: builtins.str,
+    ) -> _Grant_a7ae64f8:
+        '''Adds an IAM policy statement associated with this email identity to an IAM principal's policy.
+
+        :param grantee: the principal (no-op if undefined).
+        :param actions: the set of actions to allow.
+        '''
+        ...
+
+    @jsii.member(jsii_name="grantSendEmail")
+    def grant_send_email(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+        '''Permits an IAM principal the send email action.
+
+        Actions: SendEmail.
+
+        :param grantee: the principal to grant access to.
+        '''
+        ...
+
 
 class _IEmailIdentityProxy(
     jsii.proxy_for(_IResource_c80c4260), # type: ignore[misc]
@@ -7621,6 +7673,15 @@ class _IEmailIdentityProxy(
 
     __jsii_type__: typing.ClassVar[str] = "aws-cdk-lib.aws_ses.IEmailIdentity"
 
+    @builtins.property
+    @jsii.member(jsii_name="emailIdentityArn")
+    def email_identity_arn(self) -> builtins.str:
+        '''The ARN of the email identity.
+
+        :attribute: true
+        '''
+        return typing.cast(builtins.str, jsii.get(self, "emailIdentityArn"))
+
     @builtins.property
     @jsii.member(jsii_name="emailIdentityName")
     def email_identity_name(self) -> builtins.str:
@@ -7630,6 +7691,36 @@ class _IEmailIdentityProxy(
         '''
         return typing.cast(builtins.str, jsii.get(self, "emailIdentityName"))
 
+    @jsii.member(jsii_name="grant")
+    def grant(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        *actions: builtins.str,
+    ) -> _Grant_a7ae64f8:
+        '''Adds an IAM policy statement associated with this email identity to an IAM principal's policy.
+
+        :param grantee: the principal (no-op if undefined).
+        :param actions: the set of actions to allow.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__6eb2e4383fa830ca0d609c782e4234141a31536edcdc3259b3ad6d4f1a87c702)
+            check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
+            check_type(argname="argument actions", value=actions, expected_type=typing.Tuple[type_hints["actions"], ...]) # pyright: ignore [reportGeneralTypeIssues]
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grant", [grantee, *actions]))
+
+    @jsii.member(jsii_name="grantSendEmail")
+    def grant_send_email(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+        '''Permits an IAM principal the send email action.
+
+        Actions: SendEmail.
+
+        :param grantee: the principal to grant access to.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__de0a61fcbbcb2828db9308241fcd8e74a52c411c11c743cbfe9e2e4d3d3313dd)
+            check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantSendEmail", [grantee]))
+
 # Adding a "__jsii_proxy_class__(): typing.Type" function to the interface
 typing.cast(typing.Any, IEmailIdentity).__jsii_proxy_class__ = lambda : _IEmailIdentityProxy
 
@@ -7850,13 +7941,15 @@ class Identity(
 
     Example::
 
-        # my_hosted_zone: route53.IPublicHostedZone
+        import aws_cdk.aws_iam as iam
+        # user: iam.User
         
         
         identity = ses.EmailIdentity(self, "Identity",
-            identity=ses.Identity.public_hosted_zone(my_hosted_zone),
-            mail_from_domain="mail.cdk.dev"
+            identity=ses.Identity.domain("cdk.dev")
         )
+        
+        identity.grant_send_email(user)
     '''
 
     def __init__(self) -> None:
@@ -10043,13 +10136,15 @@ class EmailIdentity(
 
     Example::
 
-        # my_hosted_zone: route53.IPublicHostedZone
+        import aws_cdk.aws_iam as iam
+        # user: iam.User
         
         
         identity = ses.EmailIdentity(self, "Identity",
-            identity=ses.Identity.public_hosted_zone(my_hosted_zone),
-            mail_from_domain="mail.cdk.dev"
+            identity=ses.Identity.domain("cdk.dev")
         )
+        
+        identity.grant_send_email(user)
     '''
 
     def __init__(
@@ -10113,6 +10208,36 @@ class EmailIdentity(
             check_type(argname="argument email_identity_name", value=email_identity_name, expected_type=type_hints["email_identity_name"])
         return typing.cast(IEmailIdentity, jsii.sinvoke(cls, "fromEmailIdentityName", [scope, id, email_identity_name]))
 
+    @jsii.member(jsii_name="grant")
+    def grant(
+        self,
+        grantee: _IGrantable_71c4f5de,
+        *actions: builtins.str,
+    ) -> _Grant_a7ae64f8:
+        '''Adds an IAM policy statement associated with this email identity to an IAM principal's policy.
+
+        :param grantee: the principal (no-op if undefined).
+        :param actions: the set of actions to allow.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__201fd562ac01abcf39bae4ac240c6e3bd36c3ab202bc573ee6e08045ef02e36f)
+            check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
+            check_type(argname="argument actions", value=actions, expected_type=typing.Tuple[type_hints["actions"], ...]) # pyright: ignore [reportGeneralTypeIssues]
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grant", [grantee, *actions]))
+
+    @jsii.member(jsii_name="grantSendEmail")
+    def grant_send_email(self, grantee: _IGrantable_71c4f5de) -> _Grant_a7ae64f8:
+        '''Permits an IAM principal the send email action.
+
+        Actions: SendEmail, SendRawEmail.
+
+        :param grantee: the principal to grant access to.
+        '''
+        if __debug__:
+            type_hints = typing.get_type_hints(_typecheckingstub__c92b3cf4c512d5ff21aa2749ab5ec60562bb7ed4c53c41d882ac2cb7cd5752b8)
+            check_type(argname="argument grantee", value=grantee, expected_type=type_hints["grantee"])
+        return typing.cast(_Grant_a7ae64f8, jsii.invoke(self, "grantSendEmail", [grantee]))
+
     @builtins.property
     @jsii.member(jsii_name="dkimDnsTokenName1")
     def dkim_dns_token_name1(self) -> builtins.str:
@@ -10173,6 +10298,12 @@ class EmailIdentity(
         '''DKIM records for this identity.'''
         return typing.cast(typing.List[DkimRecord], jsii.get(self, "dkimRecords"))
 
+    @builtins.property
+    @jsii.member(jsii_name="emailIdentityArn")
+    def email_identity_arn(self) -> builtins.str:
+        '''The ARN of the email identity.'''
+        return typing.cast(builtins.str, jsii.get(self, "emailIdentityArn"))
+
     @builtins.property
     @jsii.member(jsii_name="emailIdentityName")
     def email_identity_name(self) -> builtins.str:
@@ -11193,6 +11324,19 @@ def _typecheckingstub__70dbe9528b7fbaa2cbed5b1def55a8c3126fbfed3ee256b878bbb907e
     """Type checking stubs"""
     pass
 
+def _typecheckingstub__6eb2e4383fa830ca0d609c782e4234141a31536edcdc3259b3ad6d4f1a87c702(
+    grantee: _IGrantable_71c4f5de,
+    *actions: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__de0a61fcbbcb2828db9308241fcd8e74a52c411c11c743cbfe9e2e4d3d3313dd(
+    grantee: _IGrantable_71c4f5de,
+) -> None:
+    """Type checking stubs"""
+    pass
+
 def _typecheckingstub__1c0b08f3a2fda3c68a4ad951604e55664aeae1537b8b8eb996f95b6feedcf9b5(
     receipt_rule: IReceiptRule,
 ) -> None:
@@ -11541,3 +11685,16 @@ def _typecheckingstub__eb1cb50e69249e3f61387a80db0e14cc9a9790c024548390466a51148
 ) -> None:
     """Type checking stubs"""
     pass
+
+def _typecheckingstub__201fd562ac01abcf39bae4ac240c6e3bd36c3ab202bc573ee6e08045ef02e36f(
+    grantee: _IGrantable_71c4f5de,
+    *actions: builtins.str,
+) -> None:
+    """Type checking stubs"""
+    pass
+
+def _typecheckingstub__c92b3cf4c512d5ff21aa2749ab5ec60562bb7ed4c53c41d882ac2cb7cd5752b8(
+    grantee: _IGrantable_71c4f5de,
+) -> None:
+    """Type checking stubs"""
+    pass